Comment by iownzerobtc

Depending on the type of attack, this defence is either part of the protocol, or can be coordinated by users in the network. Further reading here:

https://vitalik.ca/general/2020/11/06/pos2020.html